← Back to Grabbo
Privacy Policy
Last updated: March 2026
What data we collect
- Email address — used for account login via magic link codes. Not shared with third parties.
- Airport selections — your 1-2 chosen origin airports, used to personalize flight deals.
- Session token — a random identifier stored in a cookie to keep you logged in.
We do not collect names, IP addresses, payment information, or tracking data.
Why we collect it
To provide personalized flight deal alerts from your selected airports. The session cookie is strictly functional — it keeps you logged in. We do not use analytics or advertising cookies.
How long we keep it
- Login codes: deleted after 1 hour
- Sessions: expire after 30 days
- Accounts inactive for 365 days: automatically deleted
Your rights
- Export your data: Account menu or
GET /api/auth/export
- Delete your account and all data: Account menu or
DELETE /api/auth/account
- Access what we store: only email + airport codes + timestamps
Cookies
We use a single functional cookie (grabbo_session) to maintain your login session. No tracking or advertising cookies are used.
Contact
Questions about your data? Open an issue on our repository or email the address in the footer.